ok. I've putted at the end of squid.conf :( Then tried to move it up a little. Now i looks like this: --snip-- acl WIN1 dstdomain http://*.update.microsoft.com acl WIN2 dstdomain http://*.windowsupdate.microsoft.com acl WIN3 dstdomain http://download.windowsupdate.com acl WIN4 dstdomain https://*.windowsupdate.microsoft.com http_access allow WIN1 http_access allow WIN2 http_access allow WIN3 http_access allow WIN4 http_access allow ncsa_users --/snip-- Stille the same :( > >>> That's the wrong options if you are doing the authentication locally. >>> always_direct is for bypassing parent proxies. >>> I think what you want to do is to use "http_access allow WIN1" (and so >>> on) as seperate ACLs to your main one that allows your clients to >>> access. Of course, as always, I could be way off. > >> That did'n work. It still prompts for user and password :( > > The order of http_access rules is important. If you have your > authentication http_access rule before the 'allow WIN1', the > authentication popup will show. > > Joost > >